DevSecOps / SRE Lead @ Making Science
Building and securing reliable cloud infrastructure ☁️🔒

I lead a DevSecOps practice, designing and operating secure, reliable cloud infrastructure across client and internal projects. My day-to-day mixes cloud architecture, Infrastructure as Code, CI/CD, observability and hands-on cybersecurity — from threat modeling and hardening to pentesting.

• 🌍 Based in Barcelona, Spain (CET)
• 🔭 Leading DevSecOps & SRE at Making Science
• 🛡️ Passionate about security, automation and reliability
• ☁️ AWS & Google Cloud certified architect

Outside of work I also poke at internet-facing services as a hobbyist bug bounty hunter, always following responsible / coordinated disclosure: find it, report it privately to the owner, help them fix it. A couple of findings I've been rewarded for:

• 🎯 Exposed database dump on a high-traffic web app tied to a well-known Spanish streamer. Basic content/directory discovery surfaced a path serving a full, unauthenticated DB dump over HTTP. Reported privately → bounty.
• 🎯 Broken access control on a Spanish regional public-sector education platform. While helping someone enroll in a course, an error led me to an unauthenticated endpoint that returned a student's personal data — and their guardians' data for anyone enrolled as a minor — given only a national ID number (DNI). Reported privately → bounty.

“Automate everything, secure by default.”